[OPSEC][Technical Errata Reported] RFC9424 (7964)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 30 May 2024 09:08 UTC

To: kirsty.ietf@gmail.com, ollie@binaryfirefly.com, james.sellwood.ietf@gmail.com, andrew.s2@ncsc.gov.uk, warren@kumari.net, mjethanandani@gmail.com, furry13@gmail.com, rbonica@juniper.net
From: RFC Errata System <rfc-editor@rfc-editor.org>
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240530090856.408787FA60@rfcpa.rfc-editor.org>
Date: Thu, 30 May 2024 02:08:56 -0700
Message-ID-Hash: 5OYNIMP4MKEZJQN4YI7TABMUBILUBC6X
CC: opsec@ietf.org, rfc-editor@rfc-editor.org
Precedence: list
Subject: [OPSEC][Technical Errata Reported] RFC9424 (7964)
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsec/YoI3gTn9gR1Gqiov6hoMrKFSKs4>

The following errata report has been submitted for RFC9424,
"Indicators of Compromise (IoCs) and Their Role in Attack Defence".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7964

--------------------------------------
Type: Technical
Reported by: Andrew Shaw <andrew.s2@ncsc.gov.uk>

Section: 3.2.3

Original Text
-------------
At its simplest, this indicates that
   the receiver may share with anyone (TLP:CLEAR), share within the
   defined sharing community (TLP:GREEN), share within their
   organisation and their clients (TLP:AMBER+STRICT), share just within
   their organisation (TLP:AMBER), or not share with anyone outside the
   original specific IoC exchange (TLP:RED).


Corrected Text
--------------
At its simplest, this indicates that
   the receiver may share with anyone (TLP:CLEAR), share within the
   defined sharing community (TLP:GREEN), share within their
   organisation and their clients (TLP:AMBER), share just within
   their organisation (TLP:AMBER+STRICT), or not share with anyone 
   outside the original specific IoC exchange (TLP:RED).


Notes
-----
The definitions of TLP:AMBER and TLP:AMBER+STRICT are the wrong way round in the original text.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it 
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9424 (draft-ietf-opsec-indicators-of-compromise-04)
--------------------------------------
Title               : Indicators of Compromise (IoCs) and Their Role in Attack Defence
Publication Date    : August 2023
Author(s)           : K. Paine, O. Whitehouse, J. Sellwood, A. Shaw
Category            : INFORMATIONAL
Source              : Operational Security Capabilities for IP Network Infrastructure
Stream              : IETF
Verifying Party     : IESG

[OPSEC][Technical Errata Reported] RFC9424 (7964) RFC Errata System
[OPSEC]Re: [Technical Errata Reported] RFC9424 (7… Andrew S2
[OPSEC]Re: [Technical Errata Reported] RFC9424 (7… James Sellwood
[OPSEC]Re: [Technical Errata Reported] RFC9424 (7… Warren Kumari